What's new

[Help needed] Reachhing a router behind another router through DDNS and port forwarding.

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!


Occasional Visitor
Hi everyone, I need a little help with a mix of WAN + LAN + NAT situation…


So I have Router A, B & C.

(A) is Internet facing

(B) is setup on a different subnet to offer VPN coverage by using the router’s VPN client

(C) is configured as an Access Point to offer expanded wifi coverage.

With the help of a DDNS I can connect to Router (A) at:

or alternatively at:

EDITED ADDED NOTE: That 10.x.x.x address is completely fictious and shouldn't be read into as a valid IP. It is provided just as a placemarker of somekind to the description of my inquiry. My actual wan is not part of the reserved adress space.

Now I am trying to also connect remotely through DDNS to Router (B) & (C).

So I have tried to setup port forwarding to connect to Router (B) (and similarly but on a different port to try to connect to C) by using port 8460 (or as follow:

Tried in Router (A):

ExtPort:8460 IntPort:Blank IntIP:
Tried in Router (A):

ExtPort:8460 IntPort:Blank IntIP:

I am able to connect to:,, irrespective of which router I am connected to. This is so to allow any device to connect to all devices behind Router (A). As inferred above I did unsuccessfully try similar settings to port forward to Router (C).
So my question:

Is it possible to connect to a router behind another router from the wan and if so how?
Last edited:
Is "" just a fictitious address that you're using as an example? Because that is not a publicly accessible address.
Router B - can it run VPN Server?

There may be a better way than your current Web access from WAN open on Router A.
Router B - can it run VPN Server?

There may be a better way than your current Web access from WAN open on Router A.
Hi, yes Router B (Asus AC86u) can indeed run a VPN Server but it is configured as a client to use PIA (Private Internet Access).

Hmmm so you are thinking of having router B setup also as a VPN server that could be reached from WAN? But then it is using PIA to anonymize all the devices behind it... Wouldn't that interfere?
Router A - disable Web Access from WAN, place Router B WAN IP in DMZ
Router B - run OpenVPN Server on non standard port, exclude router's own IP from VPN Client routing

From outside of your network - connect to the VPN Server on Router B by your DDNS + port. Once connected you are on your LAN. Now you have access to all your routers' Web GUI by calling them by IP address. This is more secure VPN access to your network and does what you need.

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!